Being the target of a cyber-attack is something no company ever wants to experience. The only thing that’s worse is getting sued for being the target of a cyber-attack. This article offers in-house counsel a crash course in cybersecurity regulation and litigation, focusing on the liabilities stemming from the disclosure of customers’ personally identifying information.